CVE-2026-47329
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk6th percentile — higher than 6% of all known CVEs
Summary
Ubuntu Linux versions 6.8, 6.17, and 7.0 contain SAUCE patches that fail to validate invalid sizes of the name field in AppArmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.
Risk Assessment
This vulnerability may allow local users unauthorized access to the system, potentially leading to security breaches and system stability issues.
Recommendation
It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor system logs for potential exploitation attempts.
Original NVD description (English source)
Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses. The bug can be triggered by an unprivileged local user and could result in handling of crafted responses.